$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS18328.roa File: AS18328.roa (raw, json) Hash identifier: qa/eLv64jdfh5WPICOa4pIJm79ERCYXlGt1lF8CJ/G4= Subject key identifier: 08:42:1D:8F:1D:F9:A2:04:9B:53:6F:18:6D:FA:7A:7B:0B:89:EB:F9 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1ED1B171B429CBBA648E51535E3750CDFF5F9037 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS18328.roa Signing time: Sun 28 Jun 2026 18:58:03 +0000 ROA not before: Sun 28 Jun 2026 18:53:03 +0000 ROA not after: Sun 27 Jun 2027 18:58:03 +0000 asID: 18328 IP address blocks: 2a0f:6284:33fa::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d1:b1:71:b4:29:cb:ba:64:8e:51:53:5e:37:50:cd:ff:5f:90:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:53:03 2026 GMT Not After : Jun 27 18:58:03 2027 GMT Subject: CN=08421D8F1DF9A2049B536F186DFA7A7B0B89EBF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:36:9e:ef:ba:3b:6d:d8:89:80:1b:f2:d8: 9f:9d:75:fe:14:35:fe:b9:70:d3:14:a7:22:9a:87: 33:91:53:7c:a6:89:c6:ff:4e:1a:e7:0f:f9:ad:c5: 2b:ad:dc:15:95:43:46:14:65:3c:45:11:0b:fa:f7: 10:9c:fd:2d:bb:b3:46:82:8d:42:98:ea:6f:48:a9: 88:17:ad:12:ca:5c:c0:27:88:04:78:b9:f1:1d:f5: ff:32:e5:88:fa:37:83:eb:b4:2c:59:b0:90:60:bf: 98:3e:cb:e7:35:3b:6e:e4:60:ed:03:36:a8:c3:b8: d4:04:3e:e7:65:39:f5:5d:a9:ac:0b:7c:f3:ef:d4: 2b:83:c1:ae:c4:a4:6a:fc:bc:8d:18:a3:76:46:67: 10:52:23:8d:df:a3:1c:93:e8:36:3d:6e:fe:19:8c: e5:dc:58:08:80:f5:40:14:fd:5e:1a:a4:44:f2:dc: 61:ac:bd:13:dc:e3:d9:03:69:bf:ce:c8:02:dc:47: d6:6c:bc:fc:8b:6c:28:a9:4e:20:f4:1d:8d:64:73: a9:45:23:ba:7e:f6:aa:c6:e9:95:7d:4f:15:87:51: 52:f1:83:fd:7b:c1:72:e7:86:c1:24:ad:13:ff:74: 2b:18:bd:56:e7:d9:f4:46:0c:bb:e3:f8:0d:93:c8: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:1D:8F:1D:F9:A2:04:9B:53:6F:18:6D:FA:7A:7B:0B:89:EB:F9 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS18328.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:33fa::/48 Signature Algorithm: sha256WithRSAEncryption 8d:a1:33:78:5f:13:bb:77:2d:53:79:26:d6:46:01:96:d8:4c: eb:c2:bc:d1:c5:06:72:fd:02:19:9e:e1:a3:cd:bd:a8:10:cc: a6:44:ff:4f:09:fd:6d:29:65:5e:cf:f8:88:27:a4:c3:84:d0: 47:34:0e:b5:31:f7:1c:8a:7b:32:6e:6f:f3:6b:45:50:2e:36: 71:5e:45:29:2d:5e:c2:ed:49:9c:03:53:48:ad:e7:38:f6:d2: 92:a8:c2:74:cf:6f:5c:d6:b4:2f:b8:62:07:a4:0c:17:29:81: 35:2a:02:2e:1e:b8:99:f3:c4:28:b1:f7:29:a7:21:7f:ec:13: 58:de:13:1e:f0:29:2c:89:47:b6:18:5c:5b:f0:dd:2c:30:17: 8d:ed:33:83:75:22:dc:a5:aa:2a:a1:4d:f2:3b:52:af:af:cb: 9a:98:f8:e4:c7:06:35:35:91:87:09:5d:da:e8:31:2e:be:15: b6:d3:c8:e8:1c:d3:0d:bc:2a:02:1d:6b:a0:c3:72:d4:53:db: 62:b6:6a:ec:de:e7:ef:8b:ff:1d:47:3c:3e:d4:bc:54:02:05: 01:91:26:80:e1:1a:67:ae:39:b1:72:7f:38:3f:ee:0b:06:95: 67:73:7c:a4:8e:75:b4:44:4d:58:df:1d:67:4c:17:76:50:91: 8b:49:2a:f5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUHtGxcbQpy7pkjlFTXjdQzf9fkDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUzMDNaFw0yNzA2MjcxODU4MDNaMDMxMTAvBgNV BAMTKDA4NDIxRDhGMURGOUEyMDQ5QjUzNkYxODZERkE3QTdCMEI4OUVCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JDae77o7bdiJgBvy2J+ddf4U Nf65cNMUpyKahzORU3ymicb/ThrnD/mtxSut3BWVQ0YUZTxFEQv69xCc/S27s0aC jUKY6m9IqYgXrRLKXMAniAR4ufEd9f8y5Yj6N4PrtCxZsJBgv5g+y+c1O27kYO0D NqjDuNQEPudlOfVdqawLfPPv1CuDwa7EpGr8vI0Yo3ZGZxBSI43foxyT6DY9bv4Z jOXcWAiA9UAU/V4apETy3GGsvRPc49kDab/OyALcR9ZsvPyLbCipTiD0HY1kc6lF I7p+9qrG6ZV9TxWHUVLxg/17wXLnhsEkrRP/dCsYvVbn2fRGDLvj+A2TyJ81AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUCEIdjx35ogSbU28Ybfp6ewuJ6/kwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxODMyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoQz+jANBgkqhkiG9w0BAQsFAAOCAQEAjaEzeF8Tu3ctU3km1kYBlthM68K80cUG cv0CGZ7ho829qBDMpkT/Twn9bSllXs/4iCekw4TQRzQOtTH3HIp7Mm5v82tFUC42 cV5FKS1ewu1JnANTSK3nOPbSkqjCdM9vXNa0L7hiB6QMFymBNSoCLh64mfPEKLH3 Kachf+wTWN4THvApLIlHthhcW/DdLDAXje0zg3Ui3KWqKqFN8jtSr6/Lmpj45McG NTWRhwld2ugxLr4VttPI6BzTDbwqAh1roMNy1FPbYrZq7N7n74v/HUc8PtS8VAIF AZEmgOEaZ645sXJ/OD/uCwaVZ3N8pI51tERNWN8dZ0wXdlCRi0kq9Q== -----END CERTIFICATE-----Generated at Fri Jul 10 16:11:01 2026 by rpki-client